xfrm: iptfs: fix use-after-free on first_skb in __input_process_payload_CVE-2026-53240
In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix use-after-free on first_skb in __input_process_payload __input_process_payload() stores first_skb into xtfs->ra_newskb under drop_lock when starting partial reassembly, then unlocks and brea...